[Snort-users] SNORT and Razorback

Bradley, Paul paulb at ...4318...
Tue Mar 19 09:02:07 EST 2002


I have only been able to get Razorback to successfully work when I have set
the output of SNORT to log to syslog.  Razorback doesn't seem to pick up any
events when I have output set to log to another file (which i prefer for
ease of reading).  I have tried both alert_full and alert_fast...both don't
seem to trigger any response from razorback.  Anyone able to get razorback
working when not logging to syslog?

Thanks,

Paul




More information about the Snort-users mailing list